- Newest
- Most votes
- Most comments
Hi Ali,
The identity management type (SAML 2.0-based authentication) is selected during the instance creation process. This choice is made in the initial setup and cannot be changed after the instance is created. You can verify the identity management type of your Amazon Connect instance through the AWS Management Console. Navigate to the Amazon Connect console and select your instance. Look for the "Identity management" or "Authentication" settings in the instance details.
answered a year ago
For SAML-configured instances, administrators can confirm the authentication setup by reviewing the associated IAM Identity Provider settings in the AWS console's IAM section. (IAM ==> Access Management ==> Identity Providers).
answered a year ago
Thanks, Marc. Yes, I can see the IDP there, but my query is about verifying the authentication type for an existing Amazon Connect instance. Since multiple Amazon Connect instances can be created, how can I determine whether a specific instance was set up with:
- Store users in Amazon Connect
- Link to an existing directory
- SAML 2.0-based authentication
We can choose only one option during instance creation, but how can I check which one was used for an already existing instance?
I understand that once a Connect instance is created, the authentication type cannot be changed. However, my main question is: how can I determine if the existing instance is SAML 2.0-based? I am unable to find the "Identity Management" or "Authentication" settings in the instance details. I have seen references to these options in other posts, but I still cannot locate them. A screenshot would be helpful.
answered a year ago
Use the AWS CLI: aws connect describe-instance --instance-id <arn>
If the IdentityManagementType attribute specifies SAML, you have your answer.
answered 9 months ago
Relevant content
asked 3 years ago
asked 2 years ago
Thanks! I understand that once a Connect instance is created, the authentication type cannot be changed. However, my main question is: how can I determine if the existing instance is SAML 2.0-based? I am unable to find the "Identity Management" or "Authentication" settings in the instance details. I have seen references to these options in other posts, but I still cannot locate them. A screenshot would be helpful.
To determine if your instance uses SAML 2.0 you can observe the login behavior of your instance: If users are redirected to your IdP login page when accessing Connect, it's SAML-enabled If users log in directly with Connect credentials, it's using Connect's built-in authentication